Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-6004

Опубликовано: 03 янв. 2024
Источник: nvd
CVSS3: 4.8
EPSS Низкий

Описание

A flaw was found in libssh. By utilizing the ProxyCommand or ProxyJump feature, users can exploit unchecked hostname syntax on the client. This issue may allow an attacker to inject malicious code into the command of the features mentioned through the hostname parameter.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:libssh:libssh:*:*:*:*:*:*:*:*
Версия от 0.8.0 (включая) до 0.9.8 (исключая)
cpe:2.3:a:libssh:libssh:*:*:*:*:*:*:*:*
Версия от 0.10.0 (включая) до 0.10.6 (исключая)
Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 22%
0.00069
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-74
CWE-74

Связанные уязвимости

CVSS3: 4.8
ubuntu
больше 1 года назад

A flaw was found in libssh. By utilizing the ProxyCommand or ProxyJump feature, users can exploit unchecked hostname syntax on the client. This issue may allow an attacker to inject malicious code into the command of the features mentioned through the hostname parameter.

CVSS3: 4.8
redhat
больше 1 года назад

A flaw was found in libssh. By utilizing the ProxyCommand or ProxyJump feature, users can exploit unchecked hostname syntax on the client. This issue may allow an attacker to inject malicious code into the command of the features mentioned through the hostname parameter.

CVSS3: 4.8
msrc
3 месяца назад

Описание отсутствует

CVSS3: 4.8
debian
больше 1 года назад

A flaw was found in libssh. By utilizing the ProxyCommand or ProxyJump ...

CVSS3: 3.9
github
больше 1 года назад

A flaw was found in libssh. By utilizing the ProxyCommand or ProxyJump feature, users can exploit unchecked hostname syntax on the client. This issue may allow an attacker to inject malicious code into the command of the features mentioned through the hostname parameter.

EPSS

Процентиль: 22%
0.00069
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-74
CWE-74